JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.50.168.157

209.50.168.157 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.50.168.157

Whois 209.50.168.157

IP Abuse Reports for 209.50.168.157:

This IP address has been reported a total of 28 times from 17 distinct sources. 209.50.168.157 was first reported on September 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-05 16:05:54 (1 week ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇩🇪 F242	2026-05-22 20:05:59 (3 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 14:51:46 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 09:51:40.671430 2026] [security2:error] [pid 2086:tid 2110] [client 209.50.168.157:36021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|boatservicesgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boatservicesgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZh0_A7kRV2Y-ZjfQui4JgAAAFY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-24 18:40:04 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 fbarela	2026-01-02 08:00:20 (5 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇮🇹 VHosting	2025-12-23 13:55:24 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-02 22:58:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:57:56.668610 2025] [security2:error] [pid 10928:tid 10928] [client 209.50.168.157:12601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title41.com"] [uri "/.git/HEAD"] [unique_id "aS9u9BMVcY41mxgyBfmKbQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 12:44:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:44:03.180215 2025] [security2:error] [pid 424358:tid 424471] [client 209.50.168.157:36471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piazzala.com"] [uri "/.env"] [unique_id "aS7fE_p__Pmf5kEIOQCMaQAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 09:03:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 04:03:05.977271 2025] [security2:error] [pid 10457:tid 10477] [client 209.50.168.157:42209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "josephablumphotography.com"] [uri "/.env"] [unique_id "aS6rScCUUz2bAsV5joAvmgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 06:49:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:49:33.925640 2025] [security2:error] [pid 13288:tid 13288] [client 209.50.168.157:53461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christmasgreetingcardsonline.com"] [uri "/.env"] [unique_id "aS6L_SCfsqVq1zauIYuRawAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:46:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.50.168.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:46:22.767285 2025] [security2:error] [pid 28811:tid 28811] [client 209.50.168.157:38033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelalambert.com"] [uri "/.git/HEAD"] [unique_id "aS5vHoGDtPv01iNZQ5hgdgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:56 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-14 10:40:39 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 xmission.com	2025-11-01 08:58:40 (7 months ago)	209.50.168.157 - - [01/Nov/2025:02:58:39 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5 ... show more 209.50.168.157 - - [01/Nov/2025:02:58:39 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" ... show less	Brute-Force
🇩🇪 cloudmax	2025-10-27 01:54:17 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1007::b7

🇺🇸 146.190.112.200

🇰🇷 121.132.27.238

🇲🇦 105.67.1.33

🇮🇶 65.20.166.171

🇧🇷 45.236.19.0

🇨🇦 4.204.204.10

🇬🇧 2a06:4880:2000::3d

🇺🇸 2601:88:8100:d:6da3:6b0f:62c1:2833

🇺🇸 2600:3c00::f03c:91ff:fe4c:7fb0

🇺🇸 198.62.3.205

🇺🇸 192.241.150.69

🇩🇪 192.109.200.215

🇨🇳 183.198.102.214

🇨🇳 111.26.62.42

🇫🇷 91.231.89.169

🇺🇸 20.163.13.222

🇯🇵 240d:18:b6:500:f535:c753:a6f1:c28a

🇮🇳 2409:40f0:2404:c3f:bc86:59f4:bbf0:9342

🇰🇷 222.116.34.84